Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft
File: bIRL1iy_ta3M-03Bbsojy1yd3rY.mft (raw, json)
Hash identifier: lxkMmFoQtglmTmGU/HaIBenucMeXmrOByQQJqav9aM4=
Subject key identifier: 44:A2:2F:7E:0B:6E:34:30:C4:44:D5:7F:AC:3E:01:A8:E8:F2:F5:C6
Authority key identifier: 6C:84:4B:D6:2C:BF:B5:AD:CC:FB:4D:C1:6E:CA:23:CB:5C:9D:DE:B6
Certificate issuer: /CN=6c844bd62cbfb5adccfb4dc16eca23cb5c9ddeb6
Certificate serial: 019A4EF55E7938F946D77DCD43172DF13500
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 13:01:34 +0000
Manifest this update: Tue 04 Nov 2025 13:01:34 +0000
Manifest next update: Wed 05 Nov 2025 13:01:34 +0000
Files and hashes: 1: bIRL1iy_ta3M-03Bbsojy1yd3rY.crl (hash: G7dqSEE5J6HWZ4kmHTU1/pAzUGC3srk+pYCTbJiAe6A=)
2: oWKu84UqN6ZoGtWTr_LqmwizRJo.roa (hash: sXjtat/2eGC0qh1TKvXgZj2qcJea3TA909ZXBXblsyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:5e:79:38:f9:46:d7:7d:cd:43:17:2d:f1:35:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c844bd62cbfb5adccfb4dc16eca23cb5c9ddeb6
Validity
Not Before: Nov 4 13:01:34 2025 GMT
Not After : Nov 5 13:01:34 2025 GMT
Subject: CN=44a22f7e0b6e3430c444d57fac3e01a8e8f2f5c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fe:f3:28:6a:e9:47:a3:14:c4:22:05:38:a0:
35:04:68:e0:29:a8:08:19:26:3f:d2:bd:ec:2b:ed:
11:da:e0:f4:0b:21:d8:a5:5f:25:3e:d1:48:5c:6a:
76:f8:81:48:e6:e3:0f:2b:3c:10:21:cf:9e:d6:56:
ee:e6:a7:e4:36:4b:d7:66:53:d8:e9:8b:cb:a5:8e:
45:fa:71:b4:a8:2e:ab:3a:65:f6:e1:4f:b9:48:0c:
d6:65:93:2a:90:85:86:65:12:8a:15:d8:33:99:08:
4f:d7:3d:41:15:7d:1e:8b:11:43:e5:24:87:a6:17:
0c:48:9a:67:27:aa:8e:68:41:a1:32:58:be:1b:2c:
d6:3c:f8:71:d3:57:c8:3d:8c:70:19:e3:b0:68:8d:
1d:76:90:cf:a7:45:8a:71:1c:7d:fb:5a:6c:50:28:
63:80:41:bc:9c:88:a8:83:dc:29:19:76:8b:ab:9e:
40:47:ab:82:a2:9e:61:27:24:cb:8c:da:fd:92:d5:
a9:02:c8:4c:01:a0:4c:ea:6e:ff:31:26:89:65:86:
36:11:ff:d5:18:49:e1:56:13:46:42:8a:5d:80:83:
48:16:91:39:9a:51:48:6d:68:09:2e:81:81:08:88:
d6:a1:e4:9a:cc:f8:e1:1b:90:25:e0:27:d4:b8:fa:
0e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A2:2F:7E:0B:6E:34:30:C4:44:D5:7F:AC:3E:01:A8:E8:F2:F5:C6
X509v3 Authority Key Identifier:
keyid:6C:84:4B:D6:2C:BF:B5:AD:CC:FB:4D:C1:6E:CA:23:CB:5C:9D:DE:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e5:a6:a3:14:85:05:6c:ca:75:2f:f3:3d:a6:f7:fb:80:8e:
da:f2:a1:b3:21:29:38:c6:02:94:cb:f6:9b:f6:b0:4e:86:fa:
6d:ca:aa:e2:7e:a4:01:2f:2b:f8:64:cf:d2:4c:41:00:09:7b:
53:eb:be:f5:4e:66:02:7e:b5:7b:eb:b2:b8:54:04:62:64:46:
13:85:1c:97:3c:58:82:a0:6a:c1:46:a0:60:41:5a:cd:38:0a:
9b:2f:99:bc:33:59:e5:50:a9:3c:75:3f:3b:ea:b4:9d:b7:fe:
1e:b8:28:d7:fc:ad:64:34:fa:fc:1e:6b:c6:2b:91:ec:ca:c0:
eb:77:bd:3b:36:57:d7:18:7d:07:9d:57:5e:23:55:cf:fe:16:
76:fd:3a:27:1c:2e:cc:7b:48:a6:f5:1a:b2:8d:7a:fc:da:72:
1e:81:e4:28:06:a8:f0:17:b8:5c:70:04:4a:a2:5a:c4:fc:99:
f8:b8:34:aa:1e:24:96:5f:0f:0c:42:13:4d:15:eb:df:6a:33:
95:1c:bc:25:c5:2b:c4:24:46:25:8e:6c:b6:9d:12:f3:bb:7a:
51:6a:5b:05:31:90:82:2c:55:6d:36:62:a3:67:56:29:b3:9c:
17:33:70:97:d2:7c:d3:61:1f:91:c4:8e:38:20:c1:1a:6c:5a:
95:02:0c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:51:03 2025 by rpki-client